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ABSTRACT 

In  this  paper,  we  are  concerned  with  high-level  information  fusion,  such  as  it  is  envisioned  in  JDL  levels  4 
and  5.  More  precisely,  the  focus  is  on  decision  and  reasoning  systems  that  must  act  in  a  rational  and 
logical  way  from  several  knowledge  and  high-level  information  sources  and  databases.  Whatever  the 
selected  knowledge  and  information  representation  languages  in  the  sources  are,  an  automatic  reasoning 
system  that  is  part  of  decision-support  system  must  obey  unquestionable  rules  and  principles  pertaining  to 
logic.  However,  applying  those  rules  that  are  initially  defined  for  reasoning  about  a  unique  view  of  a 
situation,  which  is  supposed  to  be  fully  described,  can  lead  to  serious  and  unexpected  drawbacks  in  the 
context  of  the  fusion  of  several  different  and  partial  views.  We  address  three  such  issues.  The  first-one  is 
related  to  the  dramatic  trivialising  effects  of  logical  inconsistency.  The  second  one  lies  on  the  implicit 
transformation  of  necessary  conditions  into  sufficient  ones  when  fusion  is  operated.  The  last  one  is  the 
implicit  loss  of  more  specific  and  precise  information  in  favour  of  more  general  knowledge.  Each  of  these 
problems  is  motivated  by  intuitive  examples  before  practical  solutions  are  discussed. 


1.  INTRODUCTION 

In  this  paper,  the  focus  is  on  information  fusion  when  the  fused  information  is  actually  high-level 
knowledge,  such  as  decision  rules.  We  are  thus  concerned  with  high-level  information  fusion,  such  as  it  is 
envisioned  in  JDL  levels  4  and  5.  Complex  and  advanced  decision-support  systems  that  are  based  on  the 
fusion  of  such  knowledge  coming  from  various  sources  and  databases,  are  expected  to  act  in  a  rational  and 
logical  way.  Whatever  the  selected  knowledge  and  information  representation  languages  in  the  sources 
are,  they  must  obey  unquestionable  rules  and  principles  pertaining  to  logic.  However,  providing  them  with 
fully  standard  logical  deductive  abilities  can  lead  to  severe  drawbacks.  In  this  paper,  we  concentrate  on 
three  different  problems  that  can  occur  due  to  the  fusion  process  itself.  The  first  issue  is  related  to  the 
dramatic  trivialising  effects  of  logical  inconsistency.  The  second  one  lies  on  the  implicit  transformation  of 
necessary  conditions  into  sufficient  ones  when  fusion  is  operated.  The  last  one  is  the  implicit  loss  of  more 
specific  and  precise  information  in  favour  of  more  general  knowledge.  Each  of  these  problems  is 
motivated  by  intuitive  examples  before  practical  solutions  are  discussed. 


2.  TRIVIALISING  EFFECTS  OF  LOGICAL  INCONSISTENCY 

Complex  and  advanced  decision-support  systems  must  often  rely  on  the  fusion  of  several  different 
information  sources  and  databases  that  can  convey  elaborate  forms  of  knowledge,  such  as  complex 
decision  rules.  Obviously  enough,  we  normally  assume  that  such  systems  will  act  in  a  rational  way. 


Gregoire,  E.  (2006)  Logical  Traps  in  High-Level  Knowledge  and  Information  Fusion.  In  Information  Fusion  for  Command  Support 
(pp.  7-1  -  7-10).  Meeting  Proceedings  RTO-MP-IST-055,  Paper  7.  Neuilly-sur-Seine,  France:  RTO.  Available  from: 
http://www.rto.nato.int/abstracts.asp. 


RTO-MP-IST-055 


7-1 


Report  Documentation  Page 

Form  Approved 

OMB  No.  0704-0188 

Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 

VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 

1 .  REPORT  DATE  2.  REPORT  TYPE 

01  DEC  2006  N/A 

3.  DATES  COVERED 

4.  TITLE  AND  SUBTITLE 

Logical  Traps  in  High-Level  Knowledge  and  Information  Lusion 

5a.  CONTRACT  NUMBER 

5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

6.  AUTHOR(S) 

5d.  PROIECT  NUMBER 

5e.  TASK  NUMBER 

5f.  WORK  UNIT  NUMBER 

7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS(ES) 

CRIL  CNRS  &  IRCICA  Universite  dArtois  Rue  Jean  Souvraz  SP18 
L-62307  Lens  Cedex  LRANCE 

8.  PERFORMING  ORGANIZATION 

REPORT  NUMBER 

9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS(ES) 

10.  SPONSOR/MONITOR'S  ACRONYM(S) 

11.  SPONSOR/MONITOR'S  REPORT 
NUMBER(S) 

12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release,  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

See  also  ADM002031.,  The  original  document  contains  color  images. 

14.  ABSTRACT 

15.  SUBIECT  TERMS 

16.  SECURITY  CLASSIFICATION  OF:  17.  LIMITATION  OF 

18.  NUMBER  19a.  NAME  OF 

a.  REPORT  b.  ABSTRACT  c.  THIS  PAGE  |J|J 

unclassified  unclassified  unclassified 

34 

Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


Logical  Traps  in  High-Level  Knowledge  and  Information  Fusion 


ORGANIZATION 


Since  it  is  based  on  pieces  of  information  that  are  not  just  mere  numerical  data  but  can  be  high-level 
patterns  of  knowledge  and  reasoning,  we  thus  naturally  assume  that  uncontroversial  rules  of  logic  will 
apply.  For  instance,  if  we  have  both  that  “if  A  then  conclude  B ”  and  “A  is  true”,  then  it  should  be  able  to 
conclude  B.  Or,  if  we  have  both  that  “Either  A  or  B  is  true”  and  that  “A”  is  false,  then  it  should  be  able  to 
conclude  that  “B”  is  true.  Accordingly,  it  would  be  tempting  to  attempt  to  provide  these  systems  with  fully 
complete  and  sound  logical  reasoning  abilities,  at  least  modulo  computational  limits.  However,  a  perfect 
(standard)  logical  reasoner  can  exhibit  a  behaviour  that  leads  to  undesirable  conclusions.  One  such  a 
problem  occurs  when  the  involved  knowledge  exhibits  some  contradiction. 

For  example,  assume  that  a  first  source  of  information  contains  sensorl_  ok  whereas  a  second  one  asserts 
the  opposite  view,  namely  not(sensorl _ok) .  When  we  assume  that  the  reasoning  system  is  perfectly 
rational  and  obeys  all  usual  unquestionable  logical  rules,  such  a  single  contradiction  within  a  possibly  very 
large  amount  of  information  has  a  dramatic  effect  on  the  actual  deductive  capacity  of  the  reasoning 
system.  Indeed,  any  conclusion  and  its  contrary  can  be  deduced  from  a  single  logical  contradiction,  when  a 
sound  and  complete  deductive  system  is  considered.  From  the  example,  a  perfect  rational  deductive 
artificial  (or  real)  agent  could  deduce  any  conclusion  at  the  same  time:  e.g.  must  launch  missile  and 
not(must_launch_missile). 

This  is  thus  a  serious  issue  and  several  approaches  to  handle  it  are  the  object  of  many  research  efforts. 
Mainly,  we  can  distinguish  between  two  families  of  approaches  to  resolve  such  a  drawback. 

On  the  one  hand,  logical  systems  can  be  weakened  to  avoid  the  systematic  propagation  of  inconsistency. 
Specific  logical  systems,  like  paraconsistent  logics,  have  been  devised  to  that  end.  Another  approach 
involves  reasoning  systems  that  deal  with  maximal  consistent  subsets  of  logical  consequences.  The  idea  is 
to  reason  from  maximal  subsets  of  the  information  that  remain  contradiction-free. 

On  the  other  hand,  we  can  keep  the  full  logical  deductive  apparatus  but  apply  it  after  a  first  check  that  the 
fused  knowledge  does  not  involve  any  contradiction  has  been  performed.  In  this  respect,  it  should  be 
noted  that  checking  for  logical  contradictions  is  a  heavy  computational  task,  even  in  basic  languages  like 
the  Boolean  framework.  Indeed,  checking  the  satisfiability  of  a  set  of  propositional  clauses  is  a  NP- 
complete  problem.  Fortunately,  recent  research  progress  shows  that  it  is  tractable  for  many  instances. 


3.  NECESSARY  CONDITIONS  CAN  BECOME  SUFFICIENT  ONES 

3.1.  Motivating  example 

Assume  that  a  decision-support  system  has  to  fuse  two  different  knowledge  sources.  The  first-one 
expresses  information  about  the  technical  capacity  of  a  defence  system,  like  “If  a  target  is  detected  and  is 
not  out  of  reach  then  open  fire  against  the  target ”.  The  second  one  is  an  opportunity  and  targets  selection 
module  asserting  e.g.  “If  a  target  is  detected  and  if  there  is  not  a  more  seriously  threatening  target  then 
open  fire  against  the  target”.  If  the  two  sources  are  not  contradicting  one  another,  then  usual  logic-based 
approaches  to  knowledge  fusion  will  simply  take  the  set-theoretic  union  of  the  involved  formulas.  As  a 
consequence,  the  two  conditions  for  opening  fire,  which  were  to  be  interpreted  as  necessary  ones  in  the 
initial  sources  will  be  considered  as  sufficient  ones  in  the  fused  knowledge.  Accordingly,  if  a  target  is 
indeed  detected  and  is  not  out  of  reach,  then  fire  is  opened  against  the  target  even  if  there  exists  a  more 
seriously  threatening  one.  Clearly,  this  is  a  wrong  decision  and  the  resulted  fused  knowledge  should  be  “If 
a  target  is  detected  and  is  not  out  of  reach  and  there  is  not  a  more  seriously  threatening  target  then  open 
fire  against  the  target”. 

Circumscribing  this  problem  in  the  above  example  is  straightforward  since  it  can  be  achieved  by  fusing 
the  involved  rules  themselves.  However,  finding  necessary  conditions  that  can  be  wrongly  inteipreted  as 
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sufficient  ones  when  fusion  is  operated  is  not  easy  in  the  general  case.  In  [10],  we  discuss  a  polynomial¬ 
time  pre-processing  step  on  the  knowledge  sources  that  prevents  such  a  problem  from  occurring,  at  least  in 
a  specific  but  standard  knowledge  representation  language.  Let  us  briefly  expose  this. 

3.2.  A  standard  knowledge  representation  framework 

We  consider  a  propositional  language  L  of  formulas  over  a  finite  alphabet  P  of  Boolean  variables,  also 
called  atoms  or  propositions.  The  a  ,  v,  -i  and  =>  symbols  represent  the  standard  conjunctive,  disjunctive, 
negation  and  material  implication  connectives,  respectively.  A  literal  is  an  atom  or  a  negated  atom.  From 
a  syntactical  point  of  view,  a  knowledge  base  KB  will  be  a  multiset  of  formulas  of  L.  Actually,  we  shall 
often  assume  that  these  formulas  are  in  CNF  (conjunctive  normal  form),  i.e.  are  a  conjunction  of  clauses, 
where  a  clause  is  a  disjunction  of  literals.  In  the  following,  we  consider  a  multi-set  of  n  >  1  propositional 
knowledge  bases  E  =  {KBu...,KBn}  to  be  fused.  Ab  is  a  subset  of  P  containing  Boolean  variables  noted 
Ab\,...,  Abm,  where  Ab,  (i  e  [l-.m])  propositions  are  called  abnormality  propositions  and  are  intended  to 
represent  unexpected  faulty  behaviors  [16]  [17],  For  example,  the  rule  “When  the  switch  is  on  and  when 
the  switch  is  not  out  of  service,  then  the  lights  are  on”  is  represented  by  the  formulas. 

Switch  on  a  —Ab \  =>  Lights  on 

Outofserviceswitch  =>  Ab\ 

In  the  description  of  a  physical  device,  we  require  the  knowledge  engineer  to  introduce  abnormality 
propositions  in  most  rules,  in  order  to  allow  the  representation  of  -unexpected-  failures.  We  shall  assume 
that  each  KB,  will  use  a  different  subset  of  Ab,  and  that  these  subsets  share  an  empty  intersection.  An 
alternative  approach  would  consist  in  linking  each  physical  component  to  a  given  abnormality  proposition, 
allowing  to  mark  its  faulty  status.  But  we  believe  that  this  would  lead  to  a  loss  of  expressiveness  because 
all  sources  of  possible  failures  would  be  connected  to  a  same  abnormality  proposition. 

In  this  framework,  Ab ;  propositions  are  thus  given  a  quite  limited  epistemological  role.  They  are  not 
intended  to  encode  every  form  of  exceptions  to  rules  as  in  McCarthy’s  proposal  [16],  as  required  in 
complex  taxonomic  representation  schemata  like  e.g.  inheritance  nets,  or  in  complex  forms  of  non¬ 
monotonic  reasoning.  Actually,  they  are  just  intended  to  represent  sufficient  conditions  for  unexpected 
faulty  behavior,  only.  Obviously  enough,  it  would  be  possible  to  incorporate  other  Ab,  with  other  roles  in 
another  set,  different  from  Ab,  and  provide  them  with  an  adequate  treatment. 

Such  an  approach  to  represent  technical  specification  is  also  part  of  the  standard  framework  of  the  so- 
called  consistency-based  approaches  to  diagnosis  [14],  following  the  seminal  work  by  Reiter  [17].  In  this 
domain,  the  deep  -i.e.  from  first  principles-  knowledge  of  a  physical  device  or  process  is  described  using 
the  above  language  (in  a  first-order  setting).  Together  with  some  observations  (facts,  mainly)  and  a  list  of 
components,  a  troublesome  behavior  of  the  device  is  translated  by  logical  inconsistency  of  the  whole  set  of 
formulas,  under  the  assumption  that  all  abnormality  propositions  are  false.  Diagnosis  amounts  to  detecting 
a  set  of  abnormality  propositions  that  would  restore  consistency  when  assigned  true,  this  set  being  most 
often  required  to  be  minimal  w.r.t.  cardinality.  Let  us  stress  that  this  paper  is  not  intended  to  be  a  direct 
contribution  to  this  very  close  domain  of  research.  The  assembly  of  knowledge  components  that  is 
considered  here  is  not  necessarily  devoted  to  diagnosis  checking.  Moreover,  it  does  not  necessarily 
involve  knowledge  from  first  principles  and  is  studied  at  the  creation  phase  of  the  technical  specification 
knowledge,  not  necessarily  under  an  operation  mode  of  the  device  or  the  process.  Most  importantly,  we 
shall,  among  other  things,  consider  the  situation  where  the  assembled  knowledge  is  inconsistent, 
independently  of  working  observations,  and  even  when  no  abnormality  propositions  can  restore 
consistency  by  setting  them  to  true. 
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Finally,  let  us  recall  the  basic  semantical  definitions  we  shall  need  in  the  following.  Let  Q  denote  the  set  of 
all  interpretations  of  L,  which  are  functions  assigning  either  true  or  false  to  every  atom.  A  model  eo  of  KB 
is  an  interpretation  of  Q  that  satisfies  every  formula  of  KB.  An  interpretation  or  a  model  will  be 
represented  by  the  set  of  literals  that  it  satisfies.  The  set  of  models  of  KB  will  be  denoted  [[O]].  KB  is 
consistent  when  [[O]]  is  not  empty.  KB  \=f  expresses  that  the  formula  /  can  be  deduced  from  KB,  i.e. 
that  it  is  true  in  all  models  of  KB.  We  opt  for  a  semantical  (vs.  a  purely  syntactical)  regard  of  a  KB.  Under 
this  point  of  view,  a  KB  is  thus  the  set  of  formulas  that  it  contains  together  with  its  deductive 
consequences.  Actually,  the  models  that  correctly  describe  a  KB  are  models  that  minimize  the  number  of 
abnormality  propositions  set  to  true.  Indeed,  failures  are  expected  not  to  occur.  From  a  proof-theoretical 
point  of  view,  roughly  this  amounts  to  the  circumscription  of  the  set  of  formulas  with  respect  to 
abnormality  propositions  [16]. 

3.3.  Which  formulas  should  be  merged? 

In  the  following,  we  thus  consider  a  multi-set  of  n  >  1  propositional  knowledge-bases  E  =  {KB\,...,KBn} 
to  be  fused.  As  explained  above,  we  need  to  merge  some  types  of  formulas  themselves  if  we  want  to 
correctly  represent  the  assertion  of  multiple  necessary  conditions  for  the  proper  functioning  of  a  physical 
device  or  process.  In  this  section,  we  investigate  the  various  possible  combinations  of  formulas  that  should 
be  merged,  from  an  intuitive  point  of  view.  A  more  formal  and  general  characterization  is  provided  in  the 
next  section.  Table  1  gives  some  types  of  couples  of  formulas  involving  abnormality  propositions.  Let  us 
consider  them  successively  and  analyze  whether  they  are  to  be  merged  or  not. 

In  the  general  case,  we  cannot  forecast  all  possible  circumstances  for  bad  behavior  of  a  device. 
Accordingly,  Ab,  propositions  can  only  represent  sufficient  (vs.  necessary)  conditions  for  faulty  behavior, 
whereas  —Ab,  literals  can  only  represent  necessary  (vs.  sufficient)  conditions  for  proper  functioning.  As 
explained  in  the  introduction,  this  remark  justifies  our  decision  of  merging  formulas  of  Table  1.(1)  when 
they  belong  to  two  different  KBs:  A  a  — Ab\  =>  B  and  A  a  —A b2  =>  B  are  merged  to  form  A  a  —Ab i  a 
—Ab2  =>  B.  Now,  it  might  happen  that  both  formulas  A  a  —Ab i  =>  B  and  A  a  — Ab2  =>  B. 


A  a  — Ab\  B 

A  a  C  a— Ab\  =>  B 

A  a  Ab i  =>  B 

A  a  Ab\  =>  B 

A  =>  Ab\ 

C  =>  — Ab\ 

A  a  — =^>  B 

A  a  — l/4Z?2  =^>  B 

A  a  Ab2  =>  B 

A  a  — l4Z?2  =^>  B 

B  =>  Ab\ 

D  =>  — Ab\ 

(i) 

(2) 

(3) 

(4) 

(5) 

(6) 

Fig.  1:  Abi-formulas  in  interaction 


do  coexist  in  a  same  KB,.  In  this  specific  case,  we  shall  assume  that  the  knowledge  engineer  has  thus 
expressed  two  different  sufficient  conditions  for  B  to  be  derived  from  A.  Accordingly,  we  shall  not  merge 
them.  If  his  (her)  goal  was  to  express  two  necessary  conditions,  he  (she)  would  have  had  to  express  A  a 
—Ab\  a  -Ab2  =>  B  directly. 

Due  to  the  specific  role  for  Ab,  propositions,  we  shall  not  merge  other  types  of  formulas.  Let  us  illustrate 
this  through  the  main  other  possible  forms  of  T /^-formulas  in  interaction. 

First,  it  is  not  acceptable  to  merge  in  the  same  way  formulas  whose  antecedents  differ  on  other  literals  than 
abnormality  ones,  like  in  Table  1.(2).  We  shall  thus  not  merge  A  a  — Ab\  =>  B  and  A  a  C  a  —Ab2  =>  B. 
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To  illustrate  this,  let  us  assume  that  the  first  formula  asserts  that  when  the  switch  is  on  then  the  lights 
should  be  on  and  that  the  second  one  asserts  that  when  the  switch  is  on  and  the  safety  fuse  is  ok  then  the 
lights  should  be  on.  Assume  also  that  safety  fuses  are  only  available  for  a  very  specific  trademark.  Then, 
merging  both  formulas  into  A  a  C  a  —Ab\  a  —Ab2  =>  B  would  only  allow  us  to  infer  that  lights  should  be 
on  when  this  specific  kind  of  switches  is  under  consideration. 

Formulas  of  the  form  depicted  in  Table  1.(3)  express  faulty  conditions  that  allow  us  to  derive  B  from  A. 
Merging  them  into  A  a  Ab\  a  Ab2  =>  B  would  require  the  simultaneous  occurrence  of  faulty  situations 
related  to  Ab\  and  Ah2,  respectively,  in  order  to  infer  B  from  A.  Clearly,  this  would  be  an  unacceptable 
weakening  of  the  faulty  situations  described  in  the  initial  formulas.  A  same  analysis  can  be  held  w.r.t.  to 
couples  of  formulas  of  the  form  ( Ab\  =>  B,  Ab2  =>  B). 

In  the  general  case,  it  does  neither  seem  acceptable  to  merge  formulas  of  the  form  depicted  in  Table  1.(4) 
without  knowing  the  actual  priority  or  specificity  relation  linking  Ab\  and  Ab2.  For  the  sake  of  the 
generality,  we  shall  neither  merge  them. 

Since  it  has  been  assumed  that  each  KB,  uses  its  own  subset  of  Ab,  propositions  and  that  these  subsets 
share  an  empty  intersection,  formulas  of  Table  1.(5)  and  1.(6)  can  only  occur  in  a  same  KB,.  Formulas  of 
the  form  of  Table  1.(5)  generally  express  sufficient  conditions  for  a  faulty  situation  to  occur.  In  the  general 
case,  we  shall  not  merge  them  so  that  they  would  just  appear  as  necessary  conditions  for  a  faulty  situation. 
For  example,  we  shall  not  strengthen  Switch _ko  =>  Ab\  and  Lamp_bulb_ko  =>  Ab\  into  (Switch  _ko  a 
Lamp _bulb _ko)  =>  Ab\.  Formulas  of  the  form  of  Table  1.(6)  describe  conditions  for  not  having  a  faulty 
behavior.  Since  in  the  general  case,  we  cannot  list  such  conditions  exhaustively,  they  could  appear  as  (part 
of)  necessary  conditions  for  not  having  a  troublesome  situation.  Since  we  assume  that  they  occur  in  a  same 
KB,  to  be  merged,  we  however  assume  that  the  knowledge  engineer  has  decided  to  give  them  a  status  of 
sufficient  condition  (otherwise,  he  (she)  would  have  had  to  merge  them  into  (C  aD)=>  -Abb).  Finally, 
we  shall  neither  merge  couples  of  formulas  taken  from  different  categories,  ranging  from  (1)  to  (6). 

3.4.  Merging  formulas:  definition  and  complexity 

Let  us  generalize  and  formalize  the  above  fusion  schema  of  formulas  in  such  a  way  that  the  syntactical 
form  of  the  formulas  does  not  matter.  Accordingly,  we  consider  KB,  under  their  CNF  format,  although  we 
shall  use  non-clausal  forms  in  many  examples  for  the  clarity  of  the  presentation.  The  above  treatment  of 
necessary  conditions  in  interaction  is  as  follows. 

Definition  3.4.1. 

Let  uKB,  be  the  set-theoretic  union  of  all  KB„  expressed  in  CNF. 

Two  clauses /and  g  are  different  iff  their  sets  of  literals  they  contain  are  different. 

Definition  3.4.2. 

A  clause  /'about  fl  is  candidate  for  fusion  iff 

1.  f  is  of  the  form  fl  v  abnormal,  where  fl  represents  a  non-empty  clause  formed  from  literals  built  from 
P  \  Ab  and  where  abnormal  is  of  the  form  (Vj  Ab,),  and 

2.  f  occurs  in  uKB„  and 

3.  Vj  s.t./  g  KB,  :  3/7  v  abnormal  ’  g  KBj,  where  abnormal  ’  is  of  the  form  (Vj  Ab,)  and  is  different  from 
abnormal. 
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Let  us  stress  that  under  this  definition,  when  both  formulas  A  a  —Ab\  =>  B  and  A  a  — . Ab2  =>  B  coexist  in  a 
same  KBU  they  are  not  candidate  for  fusion,  even  if  a  third  formula  A  a  —Ab2  =>  B  occurs  in  another  KBV 
Also  note  that  this  definition  allows  formulas  of  the  form  A  =>  A  h ,  and  A  =>  Ab2  to  be  merged  into  A  => 
(Ab i  v  Abi).  For  example,  this  would  translate  that  merging  the  piece  of  information  “When  the  alarm  is 
on  then  there  is  an  electrical  problem”  in  one  KB j  with  “When  the  alarm  is  on  then  there  is  an  hydraulical 
problem”  in  another  KBi  does  not  require  both  problems  to  occur  simultaneously  when  the  alarm  is  on. 

We  call  u  KB,  the  set  of  formulas  obtained  from  yjKB,  by  performing  the  transformation  schema  of 
formulas  described  informally  in  the  previous  section.  According  to  the  above  analysis,  we  shall  only 
merge  families  of  clauses  of  the  form  fl  v  (v,  Ab\)  when  they  are  candidate  for  fusion. 

Definition  3.4.3. 

Candidate _about(fl)  =  {/ s.t.  /  is  of  the  form  fl  v  (Vj  Ah,)  and  /  is  candidate  for  fusion} 

Abnormal _about(fl)  =  {abnormal  s.t.  3  /  e  Candidate _about(fl)  s.t. /is  of  the  form  fl  v  abnormal} 
Merged _clause_about{fl)  is  the  clause  /  ’  of  the  form  flvv  Abnormai  abouuji)  ( abnormal ) 
vj+KB,  =  uKB,  \  \JflCandidate_abouttfl )  u  U/j{  Merged _clause_about(fl)} 

3.5.  Properties  of  the  u+  Operator 

Let  us  investigate  the  main  properties  of  the  u+  operator. 

Interestingly  enough,  computing  u  KB,  is  an  easy  task  from  a  computational  point  of  view 

Theorem  3.5.1. 

Let  n  be  the  number  of  clauses  in  kjKB,.  Computing  vj+KB,  is  in  O (n)  when  clauses  are  sorted  w.r.t.  a 
lexicographic  order.  It  is  in  O (n  log  n)  in  the  general  case. 

To  better  understand  the  u  operator,  let  us  turn  to  its  semantical  properties.  In  particular,  this  will  show 
us  how  this  operator  yields  sometimes  a  consistent  knowledge  base  from  inconsistent  ones. 

Intuitively,  the  u+ operator  increases  the  set  of  models  of  vjKB,.  To  illustrate  this,  let  us  consider  KB\  =  {A 
a  —Ab\  =>  B}  and  KB2  =  {A  a  —Ab2  =>  B}.  u+KB-,  =  {A  a  —Abi  a  —Ab2  =>  B},  whereas  ^jKB,  =  { A  a  — i 
Ab\  =>  B,  A  a  -i  Ab2  =>  B).  It  is  easy  to  check  that  the  only  interpretations  that  are  not  models  of  KB\  u 
KB2  contain  both  {A,  —,Bj  and  one  of  the  three  sets  {- Mbi ,  Ab2j,  {Abu  -iAb2}  and  {— Ab\ ,  -Ab2}.  Now, 
the  only  interpretation  that  is  not  a  model  of  vj+KB,  is  {A,  —,B,  —Abu  —Ab2}.  Let  us  characterize  this  more 
formally. 

By  definition,  a  model  of  u  +KB,  that  is  not  a  model  of  '.jKB,  must  falsify  at  least  one  formula  in  vjKB,. 
Clearly,  such  a  falsified  formula  in  uKB,  must  be  a  formula  that  is  going  to  be  merged  in  u  KB,  since  any 
other  formula  in  L )KB,  belongs  to  'u  KB,  . 

Lemma  3.5.1. 

Let  co  e  Q  s.t.  eo  e  [[u+AT?,]]  and  eo  g[[uAT?i]]. 

Then  3  /’  s  uKB,  s.t./’  g  u+KB,  and  eo  (/’)  =  false.  Moreover,/’  is  of  the  form  fl  v  Ab\  v  . . .  v  Abt  and  3 
/  s  u+W6j\  uKB  i  where /is  of  the  form  fl  v  Abr  v  ...  v  Abs,  where  {  Ab\,...,  Abx}(z.  {  Abr ,...,  Abf. 
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Accordingly,  let  us  define  the  set  of  additional  models  as  follows: 

Definition  3.5.1. 

Additional JAodelslyf KB j)  is  the  set  of  all  interpretations  cog  Q  s.t. 

1 .  3  /  g  vj+KBx  \  uALSj  where / is  of  the  form  fl  v  Abr  v  . . .  v  Abs  s.t.  eo  r>  {— .  fl ,  {—Ab\, ..., 
-Abf),  where 

(*)  1 Abi,. . .,  — Abj}  a  {—Abr,...,—Absj 

(**)3  f  g  vjKB\  of  the  form  fl  v  Ab\  v  ...  v  Abt  s.t.  {— Ab\,...,  — i Abt}  cz 
{—Abi,..  ■,  —vib'j} 

2.  co  g  [[  u  +KB,  ]] 

Condition  1  expresses  that  co  satisfies  one  merged  formula  /  while  it  falsifies  at  least  one  formula  /’  from 
yjKB,  that  is  going  to  be  merged.  Condition  2  ensures  that  co  is  a  model  of  yjKB,.  In  the  general  case,  it  is 
difficult  to  drop  Condition  2  and  refine  Condition  1  without  knowing  the  actual  contents  of  every  KB,.  For 
example,  it  would  be  tempting  to  drop  Condition  2  and  strengthen  Condition  1 ,  with  3  Ahk  g  {/I/;,,.. .,  Abs) 
s.t.  -Abk  €  co.  Indeed,  although  such  a  condition  ensures  that  the  resulting  merged  formula  is  satisfied  by 
co,  other  formulas  in  u+KB ,  can  be  falsified.  For  example,  let  KB\  =  {fl  v  Ab\}  and  KB2  =  {fl  v  Ab2,f2, 
f2  =>  Ah]  ).  Then  co  =  {f2 ,  —fl,  Abi,  -i Ab2 }  satisfies  the  strengthened  Condition  1.  However,  it  contradicts 
the  formula J2  =>  Ab\  g  yj' KB,  and  is  thus  not  a  model  of  yj  KB,. 

Let  us  now  show  that  Additional  Models  exactly  describes  the  additional  models  introduced  by  the 
merging  operator  u+. 

Theorem  3.5.2. 

1.  Additional _Models{yj  KB)  n  [[  kjKBi  ]]  =  0 

2.  [fjKB,  ]]  =  [[  uKB,  ]]  U  Additional _Models{yj  KB,) 

Interestingly  enough,  the  u+ operator  allows  one  to  restore  consistency  in  some  circumstances.  Indeed, 

Theorem  3.5.3. 

(a)  Wyj+KB,  ]]  =  0  =>  [[  uKBt  ]]  =  0 

(b)  [[  vjKB,  ]]  =  0  *>  [[u+^Bi  ]]  =  0 

4.  PRECISE  INFORMATION  CAN  BE  HIDDEN  BY  A  MORE  GENERAL  ONE 

When  several  information  sources  are  to  be  fused,  another  important  drawback  of  logic-based  approaches 
is  that  weaker  information  is  hidden  in  deduction  and  in  most  logic-based  inference  processes.  Indeed, 
more  precise  information  is  subsumed  by  more  general  one  from  a  deductive  point  of  view  in  the  sense 
that  the  extra  information  that  it  conveys  can  be  hidden  by  the  more  general  one.  We  believe  that  this 
problem  is  a  crucial  one  that  is  too  much  neglected  when  logic-based  information  fusion  is  considered. 
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For  example,  assume  that  one  source  asserts  the  piece  of  information  “  When  the  switch  is  on  then  the  light 
are  on”  and  the  second  one  asserts  the  more  precise  one  “ When  the  switch  is  on  and  the  fuse  is  ok  then  the 
light  are  on”.  Taking  both  pieces  of  information  into  account,  a  deductive  agent  will  be  able  to  infer  that 
the  lights  are  on  when  the  switch  is  on,  even  when  it  knows  that  the  fuse  is  not  ok!  Now,  the  problem  is 
that  forms  of  subsumption  of  more  specific  information  are  not  always  as  apparent  as  in  the  above 
example.  Actually,  it  might  concern  any  logical  consequence  of  any  of  the  information  sources.  With  the 
possible  exception  of  linear  logic,  there  is  no  general  satisfactory  logical  tool  that  can  avoid  by  itself  this 
drawback.  Accordingly,  we  discuss  a  possible  methodology  based  on  the  restricted  use  of  a  controlled 
logical  language  and  on  a-priori  tests  that  prevents  this  drawback  from  occurring. 

Let  us  for  instance  consider  KB\=  {A  =>  B,  A  a  — .  Ab\  =>  B}.  Clearly,  A  =>  B  subsumes  A  a  -Abi  =>  B 
and  — Ab\  is  thus  not  required  to  be  true  for  B  to  be  inferred  from  A.  Actually,  detecting  such  situations 
might  require  us  to  consider  the  whole  contents  of  the  knowledge  bases.  As  an  example,  we  can  see  that 
KB\=  {A  =>  C,  C  =>  B,  A  a  — Ab\  =>  B}  leads  to  an  identical  problem. 

Actually,  we  shall  assume  that  each  designer  of  a  KB\  has  checked  that  his  (her)  knowledge  base  KB, 
satisfies  the  following  assumptions  that  prevent  the  condition  for  the  absence  of  faulty  situation  from 
being  overridden. 

Assumption  4.1.  Conditions  for  the  absence  of faulty  situations  are  not  overridden  (1). 

Let  fl  represent  a  clause  formed  from  P  \  Ab. 

Vf  g  KBi  s.t./is  of  the  form  fl  v  (v;  Ab ;)  we  have  either  [[AS;]]  =  0  or  KB,  f  fl. 

Clearly,  the  above  examples  in  this  section  do  not  satisfy  this  assumption.  Indeed,  the  CNF  version  of  A  a 
— i  Ab\  =>  B  being  — A  vSv  Ab\,  we  have  both  [[A#!]]  ^  0  and  KB,  |=  — A  v  B  (which  is  equivalent  to  KB, 
\=A  =>  B). 

Let  us  propose  an  even  stronger  assumption  that  states  that  a  similar  constraint  holds  even  when  a  failure 
can  be  consistently  assumed. 

Assumption  4.2.  Conditions  for  the  absence  of faulty  situations  are  not  overridden  (2). 

Let  fl  represent  a  clause  formed  from  P  \  Ab. 

V/  g  KB,  s.t./is  of  the  form  fl  v  (vi  Ab-, )  we  have  either  [[KB,  a  (v;  Ab,)]]  =  0  or  KB,  a  (v;  Ab[)  f  fl. 
Once  again,  the  above  examples  in  this  section  do  not  satisfy  this  assumption. 

Properties  4.1. Clearly,  assumption  4.2  is  stronger  than  assumption  4.1,  at  least  in  the  most  expected  usual 
cases,  namely  when  both  [[A#!]]  G  0  and  [[KB,  a  (v,  Ab,)]]  G  0  (the  last  condition  expressing  that  a 
failure  can  be  consistently  assumed).  In  this  case  KB,  a  (v!  Ab,  )  /  fl  entails  KB,  |g  fl,  while  the 
converse  is  not  valid  in  the  general  case. 

It  is  easy  to  derive  more  focused  assumptions  taking  the  specific  structures  of  clauses  into  account.  Let  us 
express  a  natural  one  that  concerns  implication  formulas. 

Assumption  4.3.  Conditions  for  the  absence  of faulty  situations  are  not  overridden  (3). 

Let  g,  h  be  any  formulas  built  from  P  \  Ab. 

V/  g  KB[  s.t./is  of  the  form  g  a  (  A;  — .  Aty)  =>  h 

when  KB,  A;  Ab,  and  KB,  -ig  we  have  that  KB,  a  (v;  Aty)  f  g  =>  h 
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It  is  straightforward  to  see  that  the  above  examples  in  this  section  do  neither  satisfy  this  assumption. 
Similar  assumptions  should  be  tested  against  u/vR  as  well,  due  to  the  interaction  of  the  various 
knowledge  bases,  as  the  following  example  illustrates  it:  KB\  =  {A  =>  C,  A  a  —Ab\  =>  B}  and  KB2  =  {C 
=>2?}.  Let  us  just  state  the  assumption  corresponding  to  the  latter  defined  one. 

Assumption  4.4.  Conditions  for  the  absence  of faulty  situations  are  not  overridden  (4). 

Let  g,  h  be  any  formula  built  from  P  \  Ab. 

V/  e  u +KB1  s.t ./=  g  a  (  Aj — i  Ab\)  =>  h 

when  kj+KB\  f  a;  — i  Abx  and  u+KBt  f  . g  we  have  that  kj+KBx  a  (Vj  Ab[)  g  =>  h 

Let  us  conclude  this  section  by  two  remarks. 

Although  computing  any  of  the  above  assumptions  w.r.t.  a  given  clause  /  is  co-NP-complete,  it  should  not 
prevent  the  knowledge  engineer  from  performing  it  often  efficiently,  as  recent  progress  in  propositional 
deduction  and  search  have  shown  it. 

In  the  general  case,  it  does  not  seem  relevant  to  propose  subsumption  tests  for  clauses  containing  negative 
occurrences  of  abnormality  propositions.  For  example,  A  a  Ab\  =>  B  (—A  v  —Ab\  v  B  in  CNF)  is 
subsumed  by  A  =>  B.  It  translates  that  even  under  a  faulty  condition  of  the  device,  B  can  be  inferred  from 
A.  Although,  it  could  be  useful  for  the  knowledge  engineer  to  know  that  the  rule  A  =>  B  already  asserts  it 
unconditionally,  there  is  no  reason  to  forbid  it. 


5.  CONCLUSIONS 

In  this  paper,  three  currently  hot  research  topics  about  knowledge  fusion  in  a  logical  framework  have  been 
presented.  They  are  related  to  three  possibly  unwanted  abilities  of  ideally  rational  agents.  The  first  one  is 
the  need  to  reason  in  a  consistent  way  in  the  presence  of  contradictions.  The  second  one  is  linked  to  the 
possible  weakening  of  information  when  submitted  to  a  fusion  process.  The  third  one  is  due  to  the  fact  that 
more  general  pieces  of  information  can  hide  more  specific  and  more  precise  ones.  For  each  of  these 
problems,  motivating  examples  have  been  introduced  and  solutions  investigated. 
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What  is  the  paper  about? 


•  Hot  research  issues  about  the  fusion  of  symbolic 
knowlege  expressed  in  logic 

•  3  main  problems  are  motivated  and  promising 
solutions  are  presented 
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What  is  the  paper  about? 


Three  main  issues 

•  Dramatic  effects  of  logical  inconsistency 

•  Necessary  conditions  can  become  sufficient  ones 

•  Precise  information  can  be  hidden  by  more 
general  knowledge 
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What  is  the  paper  about? 


Framework 

•  Symbolic  information  and  knowledge  expressed  in 
logic 

•  Full  deductive  reasoning  capacities 
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1 .  Logical  inconsistency 


•  From  any  contradictory  pieces  of  information,  a 
sound  and  complete  logical  reasoner  can  infer 
anything  (and  its  contrary) 


•  A  main  issue  in  logic-based  fusion  is  how 
contradictory  information  should  be  handled 


E.  Gregoire 


RTO-IST-055/RSM-001 


5 


1 .  Logical  inconsistency 


Example 

•  KBj  3  {sensor  1  _ok) 

•  KB2 13  {not (sensorl _ok)} 


•  KBjU  KB2  |=  /  (V/) 

•  KB  |  u  KB2  ?|=  Launch-missile 

•  KB|U  KB2  ?|=  not(Launch-missile) 


^  Yes 
Yes 
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1 .  Logical  inconsistency 


How  to  solve  such  a  problem? 

•  Weaken  the  inference  systems 

—  paraconsistent  logics 

—  incomplete  reasoners 

—  reason  from  maximal  consistent  subsets  of  formulas 
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1 .  Logical  inconsistency 


How  to  solve  such  a  problem? 

•  Detect  inconsistencies 

-  A  heavy  task! 

-  In  the  basic  Boolean  clausal  framework,  it  is  NP- 
complete 
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2.  Necessary  conditions  can 
become  sufficient  ones 


Example 

KB1  z)  {If  a  target  is  detected  and  if  it  is  not  out  o  f  reach  then  open 
fire  against  the  target} 


KB2  id  {If  a  target  is  detected  and  if  there  is  not  a  more  seriously 
threatening  target  then  open  fire  against  the  target} 

. . .  .two  necessary  conditions  for  opening  fire  against  the  target 
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2.  Necessary  conditions  can 
become  sufficient  ones 


KE^u  KB2  will  contain  both  rules 

•  KBjU  KB2  u  {Target  detected,  Target  not  out  of  reach,  There  is  a 
more  seriouly  threatening  target}  ?  |=  open  fire  at  the  target 
=^>  Yes  which  is  a  wrong  decision... 

In  this  simple  case,  the  problem  is  due  to  the  fact  that  the  rules  themselves 
should  have  been  fused  into 

If  a  target  is  detected  and  if  it  is  not  out  of  reach  and  if  there  is  not  a 
more  seriously  threatening  target  then  open  fire  against  the  target 
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2.  Necessary  conditions  can 
become  sufficient  ones 


Actually  finding  all  forms  of  such  unexpected  behaviors  is 
not  that  easy 

A  case  study  is  presented  in  the  paper,  in  a  non-monotonic 
Boolean  framework  using  abnormality  conditions 


E.  Gregoire 


RTO-IST-055/RSM-001 


2.  Necessary  conditions  can 
become  sufficient  ones 


When  the  switch  is  on  and  when  the  switch  is  not  out  of 
service,  then  the  lights  are  on 

Switch_on  a  —Abl  =>  Lights  on 

Out_of_service_switch  =>  Ab{ 

In  the  general  case,  we  have  that 

A  a  — z Ab j  B  and  A  /\  — Ab ? 

are  merged  to  form  A  a  —Ab1  a  -Ab2  =>  B 
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2.  Necessary  conditions  can 
become  sufficient  ones 

But  many  cases  must  be  considered! 


A  a  —Abi  =>5  A  a  C  a— Abi  =>5  A/\Ab\^B 

A  a  —Ab2  =>5  A  a  —Ab2  =>5  A  a  Ab2  =>  B 


AAAb^^B  A  => 

AA—Ab2^>B  B  Abi 


C^^Ab 

D  =>  —Ab^ 
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2.  Necessary  conditions  can 
become  sufficient  ones 


Let  yjKB{  be  the  set-theoretic  union  of  all  KB{,  expressed  in 
CNF. 

Two  clauses  / and  g  are  different  iff  their  sets  of  literals  they 
contain  are  different. 
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2.  Necessary  conditions  can 
become  sufficient  ones 


A  clause / about  fl  is  candidate  for  fusion  iff 

f  is  of  the  form  fl  v  abnormal ,  where  fl  represents  a  non-empty 
clause  formed  from  literals  built  from  P  \  Ab  and  where  abnormal 
is  of  the  form  (vi  Abf  and 

-  /occurs  in  uKB{,  and 

-  Vj  s.t./  e  KB-  :  3fl  v  abnormal  ’  e  KB- ,  where  abnormal  ’  is  of 
the  form  (v^  Ab^}  and  is  different  from  abnormal. 


E.  Gregoire 


RTO-IST-055/RSM-001 


15 


2.  Necessary  conditions  can 
become  sufficient  ones 


Candidate _about(fl)  =  {/ s.t.  /  is  of  the  form  fl  v  ( v{Ab and 

/  is  candidate  for  fusion} 

Abnormal _about(fl)  =  {abnormal  s.t.  3/e  Candidate  aboutifl)  s.t. 

/is  of  the  form  fl  v  abnormal} 

Merged  clans e_about(fl)  is  the  clause  / '  of  the  form 

f1  V  V  Abnormal _about(fl)  (abnormal) 

u +KB{  =  vjKB{  \  vjp  Candidate _about(fl) 

u  u^{  Merged _clause_about(fl)} 
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2.  Necessary  conditions  can 
become  sufficient  ones 


Computational  results 

Let  n  be  the  number  of  clauses  in  yjKB{. 

Computing  u  KBl  is  in  O (n)  when  clauses  are  sorted  w.r.t. 
a  lexicographic  order. 

It  is  in  O (n  log  n)  in  the  general  case. 

=>  a  fast  pre-processing  step  can  solve  the  problem  ! 
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3.  More  precise  information  can  be  hidden 


Example 

KBj  id  {When  the  switch  is  on  then  the  lights  are  on} 

KB2  =>  { When  the  switch  is  on  and  the  fuse  is  ok  then  the  lights  are  on} 

KBjU  KB2  u  {the  switch  is  on,  the  fuse  is  not  ok}  ?|=  lights  are  on 

=>  Yes 


But  this  problem  is  not  always  that  apparent... 
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3.  More  precise  information  can  be  hidden 


KB}=  {A  =>  B,  A  a  Abx  =>  B } 

Actually,  detecting  such  situations  might  require  us  to 
consider  the  whole  contents  of  the  knowledge  sources 

KB2  =  {A  =>  C,  C  =>  B,  A  a  —iA b ,  =>  B}  leads  to  an  identical 
problem. 
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3.  More  precise  information  can  be  hidden 


•  We  must  ensure  that  each  designer  of  a  KB{  has  checked  that  his  (her) 
KB{  satisfies  the  following  assumptions  that  prevent  the  condition  for 
the  absence  of  faulty  situation  from  being  overridden. 


Assumption  1.  Conditions  for  the  absence  of  faulty  situations  are  not 
overridden  (1). 

•  Let  fl  represent  a  clause  formed  from  P  \  Ab. 

•  Vf  e  KB{  s.t./is  of  the  form  fl  v  (v{  Ab{)  we  have  either  [[KBf]  =  0 
or  KB {  \*fl. 
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3.  More  precise  information  can  be  hidden 


An  even  stronger  assumption  that  states  that  a  similar  constraint  holds 
even  when  a  failure  can  be  consistently  assumed. 

Assumption  2.  Conditions  for  the  absence  of  faulty  situations  are  not 
overridden  (2). 

•  Let  fl  represent  a  clause  formed  from  P  \  Ab. 

•  V/e  KB.  s.t./is  of  the  form  fl  v  (v-  Abb  we  have  either  [[KB.  a  (v.- 
Abf\\  =  0  or  KB-  a  (yxAb^  ffl 
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3.  More  precise  information  can  be  hidden 


The  specific  structures  of  clauses  can  be  taken  into  account.  For 
implication  formulas: 

Assumption  3.  Conditions  for  the  absence  of  faulty  situations  are  not 
overridden  (3). 

•  Let  g,  h  be  any  formulas  built  from  P  \  Ab. 

•  V/e  KB-  s.t./is  of  the  form  gA(Ap  Abi)  =^>  h 

•  when  KB{  f  — i  Ab{  and  KB{  f  — i g  we  have  that  KB{  a  (y{  Ab{)  g 

=>  h 
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3.  More  precise  information  can  be  hidden 


Similar  assumptions  should  be  tested  against  'u  KB]  as  well, 
due  to  the  interaction  of  the  various  knowledge  sources 


Example: 

KB1  =  {A  =>  C,A  a  -u4 bx^B}  and  KB2  =  {C^B}. 
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Conclusions 


Fusing  symbolic  information  is  not  that  straightforward  ! 


Unexpected  conclusions  can  be  drawn  using  basic  deductive  reasoning 
based  on  directly  fused  knowledge 


In  the  paper,  we  have  focused  on  three  such  issues.  For  each  of  them,  we 
have  emphasised  their  importance,  and  sketched  some  possible 
practical  solutions. 
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